CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: podman, prometheus, nats-top, kubernetes-csi-livenessprobe, kubernetes-csi-driver-hostpath, conjur-cli, metrics-server, kubewatch, contour, cluster-api-gcp-controller, boring-registry, crossplane-provider-aws-dynamodb, oras, stern, cluster-proportional-autoscaler,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: podman, prometheus, nats-top, kubernetes-csi-livenessprobe, kubernetes-csi-driver-hostpath, conjur-cli, metrics-server, kubewatch, contour, cluster-api-gcp-controller, boring-registry, crossplane-provider-aws-dynamodb, oras, stern, cluster-proportional-autoscaler,...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: podman, prometheus, nats-top, kubernetes-csi-livenessprobe, kubernetes-csi-driver-hostpath, conjur-cli, metrics-server, kubewatch, contour, cluster-api-gcp-controller, boring-registry, crossplane-provider-aws-dynamodb, oras, stern, cluster-proportional-autoscaler,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: podman, prometheus, nats-top, kubernetes-csi-livenessprobe, kubernetes-csi-driver-hostpath, conjur-cli, metrics-server, kubewatch, contour, cluster-api-gcp-controller, boring-registry, crossplane-provider-aws-dynamodb, oras, stern, cluster-proportional-autoscaler,...

CLEANSTART-2026-CA79883 Security fixes for GHSA-6V2P-P943-PHR9, GHSA-C6GW-W398-HV78, GHSA-F6X5-JH6R-WRFV, GHSA-HCG3-P754-CR77, GHSA-J5W8-Q4QC-RX2X, GHSA-QXP5-GW88-XV66, GHSA-V778-237X-GJRC, GHSA-VVGC-356P-C3XW applied in versions: 1.15.0-r1

Multiple security vulnerabilities affect the rabbitmq-messaging-topology-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

Malicious Package

Overview @purecore/rabbitmq is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @purecore/rabbitmq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e503973dbf2c860017e4ea8118ddec5cd43a537c32eb8fca24ac544a86d8822 The package @purecore/rabbitmq was found to contain malicious code. Source: ghsa-malware...

MAL-2026-749 Malicious code in @purecore/rabbitmq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e503973dbf2c860017e4ea8118ddec5cd43a537c32eb8fca24ac544a86d8822 The package @purecore/rabbitmq was found to contain malicious code. Source: ghsa-malware...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: flannel, azure-workload-identity-webhook, nats-top, flux-image-automation-controller, nerdctl, newrelic-nri-statsd, blobfuse2, gitness, docker-machine-driver-linode, kubernetes-csi-livenessprobe, cert-manager-cmctl, manifest-tool, kubernetes-dashboard,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: nats-top, kubernetes-csi-livenessprobe, manifest-tool, kubernetes-csi-driver-hostpath, conjur-cli, ferretdb, cluster-api-gcp-controller, boring-registry, crossplane-provider-aws-dynamodb, ip-masq-agent, lazygit, k8sgateway, timoni, flux-notification-controller, xcadd...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: nats-top, kubernetes-csi-livenessprobe, manifest-tool, kubernetes-csi-driver-hostpath, conjur-cli, ferretdb, cluster-api-gcp-controller, boring-registry, crossplane-provider-aws-dynamodb, ip-masq-agent, lazygit, k8sgateway, timoni, flux-notification-controller, xcadd...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: nats-top, kubernetes-csi-livenessprobe, manifest-tool, kubernetes-csi-driver-hostpath, conjur-cli, ferretdb, cluster-api-gcp-controller, boring-registry, crossplane-provider-aws-dynamodb, ip-masq-agent, lazygit, k8sgateway, timoni, flux-notification-controller, xcadd...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: flannel, azure-workload-identity-webhook, nats-top, flux-image-automation-controller, nerdctl, newrelic-nri-statsd, blobfuse2, gitness, docker-machine-driver-linode, kubernetes-csi-livenessprobe, cert-manager-cmctl, manifest-tool, kubernetes-dashboard,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: flannel, azure-workload-identity-webhook, nats-top, flux-image-automation-controller, nerdctl, newrelic-nri-statsd, blobfuse2, gitness, docker-machine-driver-linode, kubernetes-csi-livenessprobe, cert-manager-cmctl, manifest-tool, kubernetes-dashboard,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, chisel, gogatekeeper, apache-exporter, prometheus-beat-exporter-fips, prometheus-postgres-exporter, apm-server, bom, longhorn-cli, secrets-store-csi-driver-provider-aws-fips, doppler-kubernetes-operator, percona-server-mongodb-operator-fips,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, chisel, gogatekeeper, apache-exporter, prometheus-beat-exporter-fips, prometheus-postgres-exporter, apm-server, bom, longhorn-cli, secrets-store-csi-driver-provider-aws-fips, doppler-kubernetes-operator, percona-server-mongodb-operator-fips,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, chisel, gogatekeeper, apache-exporter, nri-cassandra, linkerd2-proxy-init, prometheus-beat-exporter-fips, apm-server, prometheus-postgres-exporter, bom, longhorn-cli, secrets-store-csi-driver-provider-aws-fips, doppler-kubernetes-operator,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, chisel, gogatekeeper, apache-exporter, nri-cassandra, linkerd2-proxy-init, prometheus-beat-exporter-fips, apm-server, prometheus-postgres-exporter, bom, longhorn-cli, secrets-store-csi-driver-provider-aws-fips, doppler-kubernetes-operator,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, chisel, gogatekeeper, apache-exporter, nri-cassandra, linkerd2-proxy-init, prometheus-beat-exporter-fips, apm-server, prometheus-postgres-exporter, bom, longhorn-cli, secrets-store-csi-driver-provider-aws-fips, doppler-kubernetes-operator,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, chisel, gogatekeeper, apache-exporter, prometheus-beat-exporter-fips, prometheus-postgres-exporter, apm-server, bom, longhorn-cli, secrets-store-csi-driver-provider-aws-fips, doppler-kubernetes-operator, percona-server-mongodb-operator-fips,...